C CCCCCCCC CC CC CCCCCC C
C CCCCCCCC CC CC CCCCCC C
C CCCCCCCC CC CC CCCCCC C
What is Biometrics? Definition "Biometrics is the automated identification, or verification of human identity through the measurement of repeatable physiological, or behavioral characteristics. Identification: The search of a biometric sample against a database of other samples in order to ascertain whether the donor is already contained in, or new to the database. Verification: It refers to the 'one to one' comparison between a sample and another to ask the question, 'are you who you say you are.' The term "biometrics" is derived from the Greek words bio (life) and metric (to measure). For our use, biometrics refers to technologies for measuring and analyzing a person's physiological or behavioral characteristics, such as fingerprints, irises, voice patterns, facial patterns, and hand measurements, for identification and verification purposes.
Figure 1 Explains the meaning of definition Identification and verification have long been accomplished by showing something you have, such as a license or a passport. Sometimes it also required something you know, such as a password or a PIN. As we move into a time when we need more secure and accurate measures, we begin to look at using something you are: biometrics. Biometrics are automated methods of recognizing a person based on a physiological or behavioral characteristic.
As the level of security breaches and transaction fraud increases, the need for highly secure identification and personal verification technologies is becoming apparent. Biometric-based solutions are able to provide for confidential financial transactions and personal data privacy. The need for biometrics can be found in federal, state and local governments, in the military, and in commercial applications. Enterprise-wide network security infrastructures, government IDs, secure electronic banking, investing and other financial transactions, retail sales, law enforcement, and health and social services are already benefiting from these technologies.
NEED OF BIOMETRICS 1. Significant Population Increase 2. E-Commerce, PC Banking 3. Increased Identity Theft 4. Increased Fraud 5. Too Many PINS & Passwords 6. Need for Improved Physical / Logical Access Control 7. Highly Secure Identification and Personal Verification 8. To Enhance Social Security Number(SSN)
History of BIOMETRICS
Chinese Precursor:
Possibly the first known example of biometrics in practice was a form of finger printing being used in China in the 14th century, as reported by explorer Joao de Barros. He wrote that the Chinese merchants were stamping children's palm prints and footprints on paper with ink to distinguish the young children from one another. This is one of the earliest known cases of biometrics in use and is still being used today.
European Origins:
Until the late 1800s, identification largely relied upon "photographic memory." In the 1890s, an anthropologist and police desk clerk in Paris named Alphonse Bertillon sought to fix the problem of identifying convicted criminals and turned biometrics into a distinct field of study. He developed a method of multiple body measurements which got named after him (Bertillonage). His system was used by police authorities throughout the world, until it quickly faded when it was discovered that some people shared the same measurements and based on the measurements alone, two people could get treated as one. After the failure of Bertillonage, the police started using finger printing, which was developed by Richard Edward Henry of Scotland Yard, essentially reverting to the same methods used by the Chinese for years.
Modern Times:
In the past three decades biometrics has moved from a single method (fingerprinting) to more than ten discreet methods. Companies involved with new methods number in the hundreds and continue to improve their methods as the technology available to them advances. Prices for the harware required continue to fall making systems more feasible for low and mid-level budgets. As the industry grows however, so does the public concern over privacy issues. Laws and regulations continue to be drafted and standards are beginning to be developed. While no other biometric has yet reached the breadth of use of fingerprinting, some are beginning to be used in both legal and business areas.
Enrollment Mode:
A sample of the biometric trait is captured, processed by a computer, and stored for later comparison. Biometric recognition can be used in Identification mode, where the biometric system identifies a person from the entire enrolled population by searching a database for a match based solely on the biometric. For example, an entire database can be searched to verify a person has not applied for entitlement benefits under two different names. This is sometimes called one-to-many matching.
Verification Mode:
this mode biometric system authenticates a persons claimed identity from their previously enrolled pattern. This is also called one-to-one matching. In most computer access or network access environments, verification mode would be used.
4
A user enters an account, use inserts a token such as a smart card, butinstead of entering a password, a simple glance at a camera is enough to authenticate the user.
biometrics collection
Biometrics are typically collected using a device called a sensor. These sensors are used to acquire the data needed for recognition and to convert the data to a digital form. The quality of the sensor used has a significant impact on the recognition results. Example sensors could be digital cameras (for face recognition) or a telephone (for voice recognition).
biometric templates
A biometric template is a digital representation of an individuals distinct characteristics, representing information extracted from a biometric sample. Biometric templates are what are actually compared in a biometric recognition system. Templates can vary between biometric modalities as well as vendors. Not all biometric devices are template based. For example, voice recognition is based on models. The difference between templates and models is beyond the scope of this paper.
Biometric devices have three primary components 1. Automated mechanism that scans and captures a digital or analog image of a living personal characteristic. 2. Compression, processing, storage and comparison of image with a stored data. 3. Return output whether sample is match or unmatched and interfaces with application systems.
TYPES OF BIOMETRICS
There are two types of biometrics: behavioral and physical. Behavioral biometrics - Used for verification . Physical biometrics - Used for either identification or verification.
Physical biometrics :
Fingerprint - Analyzing fingertip patterns. Facial Recognition - Measuring facial characteristics. Hand Geometry - Measuring the shape of the hand. Iris recognition - Analyzing features of colored ring of the eye. Vascular Patterns - Analyzing vein patterns. Retinal Scan - Analyzing blood vessels in the eye. Bertillonage - Measuring body lengths (no longer used).
Behavioral biometrics:
Speaker Recognition - Analyzing vocal behavior. Signature- Analyzing signature dynamics. Keystroke - Measuring the time spacing of typed words.
CHARACTERISTICS OF BIOMETRICS
Biometric characteristics can be divided in two main classes, as represented in figure on the right:
y
Physiological are related to the shape of the body. The oldest traits, that have been used for more than 100 years, are fingerprints. Other examples are face recognition, hand geometry and iris recognition. Behavioral are related to the behavior of a person. The first characteristic to be used, still widely used today, is the signature. More modern approaches are the study of keystroke dynamics and of voice.
BIOMETRIC MODALITIES
Different applications and environments have different constraints. For instance, adequate fingerprint samples require user cooperation; whereas, a face image can be Captured by a surveillance camera. Furthermore, Fingerprints are not available for many of the suspects on Watch lists. There are also multiple biometric modalities for technical and financial reasons. Many scientists become interested in developing a system based on their own research. Upon a successful implementation, venture capitalist, interested in the implementation of such a system, commercialize a product. Therefore, wide varieties of modalities are being researched and are available on the market.
Fingerprint
The patterns of friction ridges and valleys on an individual's fingertips are unique to that individual. For decades, law enforcement has been classifying and determining identity by matching key points of ridge endings and bifurcations. Fingerprints are unique for each finger of a person including identical twins. One of the most commercially available biometric technologies, fingerprint recognition devices for desktop and laptop access are now widely available from many different vendors at a low cost. With these devices, users no longer need to type passwords - instead, only a touch provides instant access. Fingerprint systems can also be used in identification mode. Several states check fingerprints for new applicants to social services benefits to ensure recipients do not fraudulently obtain benefits under fake names. New York State has over 900,000 people enrolled in such a system.
Advantages:
y Subjects have multiple fingers. y Easy to use, with some training y Some systems require little space. y Large amounts of existing data to allow background and/or watchlist checks.
10
y Has proven effective in many large scale systems over years of use. y Fingerprints are unique to each finger of each individual and the ridge arrangement remains permanent during one's lifetime.
Disadvantages:
y Public Perceptions. y Privacy concerns of criminal implications. y Health or societal concerns with touching a sensor used by countless individuals.
Face
The identification of a person by their facial image can be done in a number of different ways such as by capturing an image of the face in the visible spectrum using an inexpensive camera or by using the infrared patterns of facial heat emission. Facial recognition in visible light typically model key features from the central portion of a facial image. Using a wide assortment of cameras, the visible light systems extract features from the captured image(s) that do not change over time while avoiding superficial features such as facial expressions or hair. Several approaches to modeling facial images in the visible spectrum are Principal Component Analysis, Local Feature Analysis, neural networks, elastic graph theory, and multi-resolution analysis. Some of the challenges of facial recognition in the visual spectrum include reducing the impact of variable lighting and detecting a mask or photograph. Some facial recognition systems may require a stationary or posed user in order to capture the image, though many systems use a real-time process to detect a person's head and locate the face automatically. Major benefits of facial recognition are that it is non-intrusive, hands-free, continuous and accepted by most users.
Advantages:
y No contact required. y Commonly available sensors (cameras).
11
y Large amounts of existing data to allow background and/or watchlist checks. y Easy for humans to verify results.
Disadvantages:
y Face can be obstructed by hair, glasses, hats, scarves etc. y Sensitive to changes in lighting, expression, and poses faces change over time. y Propensity for users to provide poor-quality video images yet to expect accurate results.
Hand Geometry
These methods of personal authentication are well established. Hand recognition has been available for over twenty years. To achieve personal authentication, a system may measure either physical characteristics of the fingers or the hands. These include length, width, thickness and surface area of the hand. One interesting characteristic is that some systems require a small biometric sample (a few bytes). Hand geometry has gained acceptance in a range of applications. It can frequently be found in physical access control in commercial and residential applications, in time and attendance systems and in general personal authentication applications
Advantages
y Easy to capture. y Believed to be a highly stable pattern over the adult lifespan.
Disadvantages
y Use requires some training. y Not sufficiently distinctive for identification over large Databases.
12
y Usually used for verification of a claimed enrollment identity. y System requires a large amount of physical space.
Speaker/voice
Speaker recognition has a history dating back some four decades, where the output of several analog filters were averaged over time for matching. Speaker recognition uses the acoustic features of speech that have been found to differ between individuals. These acoustic patterns reflect both anatomy (e.g., size and shape of the throat and mouth) and learned behavioral patterns (e.g., voice pitch, speaking style). This incorporation of learned patterns into the voice templates (the latter called "voiceprints") has earned speaker recognition its classification as a "behavioral biometric." Speaker recognition systems employ three styles of spoken input: text-dependent, text-prompted and text independent. Most speaker verification applications use text-dependent input, which involves selection and enrollment of one or more voice passwords. Text-prompted input is used whenever there is concern of imposters. The various technologies used to process and store voiceprints includes hidden Markov models, pattern matching algorithms, neural networks, matrix representation and decision trees. Some systems also use "antispeaker" techniques, such as cohort models, and world models. Ambient noise levels can impede both collection of the initial and subsequent voice samples. Performance degradation can result from changes in behavioral attributes of the voice and from enrollment using one telephone and verification on another telephone. Voice changes due to aging also need to be addressed by recognition systems. Many companies market speaker recognition engines, often as part of large voice processing, control and switching systems. Capture of the biometric is seen as non-invasive. The technology needs little additional hardware by using existing microphones and voice-transmission technology allowing recognition over long distances via ordinary telephones (wire line or wireless).
Advantages
13
Disadvantages
y Difficult to control sensor and channel variances that significantly impact capabilities. y Not sufficiently distinctive for identification over large databases.
Iris
This recognition method uses the iris of the eye which is the colored area that surrounds the pupil. Iris patterns are thought unique. The iris patterns are obtained through a video-based image acquisition system. Iris scanning devices have been used in personal authentication applications for several years. Systems based on iris recognition have substantially decreased in price and this trend is expected to continue. The technology works well in both verification and identification modes (in systems performing one-to-many searches in a database). Current systems can be used even in the presence of eyeglasses and contact lenses. The technology is not intrusive. It does not require physical contact with a scanner. Iris recognition has been demonstrated to work with individuals from different ethnic groups and nationalities
Advantages
y No contact Required. y Protected internal organ,less prone to injury. y Believed to be highly stable over lifetime.
Disadvantages
y Difficult to capture for some individuals. y Easily obscured by eyelashes,eyelids,lens and reflections from the cornea. y Public myths and fears related to scanning the eye with a light source.
14
y Acquisition of an iris image requires more training and attentiveness than most biometrics. y Lack of existing data deters ability to use for background or watch list checks. y Cannot be verified by a human.
Signature verification
This technology uses the dynamic analysis of a signature to authenticate a person. The technology is based on measuring speed, pressure and angle used by the person when a signature is produced. One focus for this technology has been e-business applications and other applications where signature is an accepted method of personal authentication.
15
BIOMETRIC SECURITY
A concern is how a person's biometric, once collected, can be protected. Australia has therefore introduced a Biometrics Institute Privacy Code Biometrics Institute in order to protect consumer personal data beyond the current protections offered by the Australian Privacy Act.
Sociological concerns
As technology advances, and time goes on, more private companies and public utilities may use biometrics for safe, accurate identification. These advances are likely to raise concerns such as:
y
Physical - Some believe this technology can cause physical harm to an individual using the methods, or that instruments used are unsanitary. For example, there are concerns that retina scanners might not always be clean. Personal Information - There are concerns whether our personal information taken through biometric methods can be misused, tampered with, or sold, e.g. by criminals stealing, rearranging or copying the biometric data. Also, the data obtained using biometrics can be used in unauthorized ways without the individual's consent.
Cancelable Biometrics
Physical features, such as face, fingerprint, iris, retina, hand, or behavioral features, such as signature, voice, gait, must fulfill a certain criteria to qualify for use in recognition. They must be unique, universal, acceptable, collectable and convenient to the person, in addition, to reliability at recognition, performance and circumvention. However, most importantly, permanence is a key feature for biometrics. They must retain all the above features in particular the uniqueness
16
unchanged, or acceptably changed, over the lifetime of the individual. On the other hand, this fundamental feature has brought biometrics to challenge a new risk. If biometric data is obtained, for example compromised from a database, by unauthorized users, the genuine owner will lose control over them forever and lose his/her identity.
17
BIOMETRIC DEVICES
OptiMouse
OptiMouse is an innovative optical tracking mouse that can operate on almost any surface with exceptional response, it features the industry's most rugged and advanced optical sensor using patented SEIR fingerprint biometric technology.
system that has achieved advanced operability using world-renowned TCP/IP networking protocol without having to compromise on security.
20
PERFORMANCE MANAGEMENT
y
21
BIOMETRIC APPLICATIONS
y y y
y y
y y
Biometric Time Clocks -Which are being increasingly used in various organisations to control employee timekeeping. Biometric safes and biometric locks- Provides security to the homeowners. Biometric access control systems Providing strong security at entrances. Biometric systems are also developed for securing access to pc's and providing single logon facilities. Wireless biometrics for high end security and providing safer transactions from wireless devices like PDA's, etc. Identifying DNA Patterns of biometrics technology in identifying DNA patterns for identifying criminals, etc. Biometrics airport security devices are also deployed at some of the world's famous airports to enhance the security standards. National border controls: the biometrics as a living passport.
y Secure access to bank cash machine accounts. y Ticket less air travel. y Tracing missing or wanted persons. y A good tool for Anti-terrorism. y Automobile ignition and unlocking. y Credit card authentication. y Internet security; control of access to privileged information. y Voter verification.
22
CONCLUSION
The proper implementation of biometric system will result a world without identification and authentication threats. We can forgot our passwords and PINs. With biometrics one can say MY BODY IS MY PASSWORD.
23
24